Senior Associate

We are looking for a Data Privacy Implementor with hands-on implementation experience to drive the implementation and maintenance of Pivot Path's PIMS in alignment with ISO/IEC 27701:2019, applicable privacy regulations like DPDP/GDPR and customer requirements.

Key Responsibilities

• Drive end-to-end implementation of ISO/IEC 27701:2019 PIMS and privacy controls.
• Develop and maintain RoPA, PII inventory, data flows, Privacy Risk Register and SoA.
• Conduct/support DPIAs/PIAs and privacy risk assessments.
• Implement Controller and Processor privacy requirements, including HR processor activities.
• Implement and manage DSAR, consent, privacy notice, retention, deletion and data transfer processes.
• Implement DPA and third-party/sub-processor privacy controls.
• Prepare and maintain objective evidence for ISO 27701 certification audits.
• Drive privacy control gaps, corrective actions and audit findings to closure.
• Support privacy awareness, internal audits and management reviews.

Mandatory Requirements

• Hands-on implementation experience in ISO/IEC 27701 / PIMS is mandatory.
• 3–6 years of experience in Data Privacy, PIMS, GRC, Compliance or Information Security.
• Strong working knowledge of ISO/IEC 27701 and ISO/IEC 27001.
• Practical experience with RoPA, DPIA/PIA, DPA, DSAR, privacy risk assessments and privacy controls.
• Experience implementing requirements for both PII Controllers and PII Processors.
• Strong documentation, stakeholder-management and audit-readiness skills.
• ISO/IEC 27701 Lead Implementer / Lead Auditor certification.